Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/J1AC2CGXXrTTpIaJq2hOjjx0B-s.roa
File: J1AC2CGXXrTTpIaJq2hOjjx0B-s.roa (raw, json)
Hash identifier: rfwcCWnyCKJ1Q4liTpegJBG60LcwddKTS9dShlJcGkg=
Subject key identifier: 27:50:02:D8:21:97:5E:B4:D3:A4:86:89:AB:68:4E:8E:3C:74:07:EB
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 05913189
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/J1AC2CGXXrTTpIaJq2hOjjx0B-s.roa
Signing time: Sun 03 Apr 2022 02:59:43 +0000
ROA not before: Sun 03 Apr 2022 02:59:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93401481 (0x5913189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Apr 3 02:59:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=275002d821975eb4d3a48689ab684e8e3c7407eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:04:6c:7a:aa:fd:50:89:be:8d:1a:eb:6c:5f:
77:b4:6c:4e:23:c7:f1:51:73:43:15:27:0a:82:19:
eb:34:2e:6d:80:f7:85:9a:2a:02:2d:ed:03:80:34:
9e:88:31:62:6e:c8:ea:eb:1b:6c:b8:90:dd:eb:22:
1a:4e:4c:ab:19:a5:4c:b7:09:3e:98:58:35:4f:2a:
2a:e7:e2:78:fe:1b:16:9f:69:ab:f0:47:9d:6e:7b:
20:57:ab:ba:d4:85:5f:2b:9d:5a:26:31:0f:da:6e:
e8:16:35:10:ce:ad:03:1b:33:19:6f:e8:40:7b:8d:
f2:71:2e:ca:6e:43:eb:41:23:b8:27:26:35:38:11:
9f:0d:c4:f1:40:43:1c:67:a8:22:bb:86:6c:5f:6c:
8d:f9:22:71:d6:6e:b0:59:96:ad:c0:1f:37:b0:71:
92:dd:b4:10:10:36:64:5d:d1:46:79:63:fa:8d:96:
06:60:fd:3e:be:c0:ef:de:5b:58:1d:e5:7c:72:cb:
00:f2:6c:3d:c9:f4:17:c4:c0:e0:99:a2:4d:f2:c6:
7b:be:69:f2:8e:1f:e1:49:2a:6e:41:70:9b:3a:06:
f5:62:74:ea:71:dd:1c:74:5f:f0:b4:42:6b:c5:3c:
0e:1b:eb:ab:a2:25:af:6e:74:a5:2f:52:0b:56:ba:
f9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:50:02:D8:21:97:5E:B4:D3:A4:86:89:AB:68:4E:8E:3C:74:07:EB
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/J1AC2CGXXrTTpIaJq2hOjjx0B-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
26:97:95:1d:a6:24:12:34:9f:f7:c9:bd:7b:73:8f:e1:f9:a3:
14:46:66:50:dc:88:82:67:db:12:21:36:b3:e8:50:06:f7:c6:
71:67:f9:7a:0b:7b:29:35:a0:b2:5f:70:55:e9:40:3c:dd:ba:
68:73:ea:ec:aa:c8:a0:92:74:16:7a:b3:cc:d8:6c:ef:57:07:
48:59:d6:81:4f:37:8f:a9:75:f3:61:58:06:14:60:3b:80:c3:
91:5f:69:45:a7:4b:c5:15:56:0e:5f:93:f9:0a:09:cc:af:db:
49:14:88:52:a8:6f:8c:32:2e:bd:06:88:ec:5c:59:c4:74:bf:
e7:47:24:19:d8:21:38:35:bd:ed:c6:ca:f8:20:b1:d9:bb:73:
b8:47:ac:93:72:3f:33:c2:f8:13:a4:47:d7:14:21:46:9b:31:
a5:66:50:1c:e6:91:d4:f0:45:18:81:32:76:71:70:35:f7:42:
5c:9a:28:ef:4f:75:13:e5:21:de:24:f3:40:05:f4:b2:59:ab:
3e:60:25:d3:38:32:8c:2a:12:cd:df:41:01:b6:54:75:69:c8:
42:24:ed:32:67:72:72:6f:92:f6:35:7d:a3:c7:d1:9e:84:30:
f9:0c:a5:0b:a8:5f:2c:a3:02:db:3b:d3:48:d5:66:2e:28:5d:
f4:4b:81:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:36:34 2025 by rpki-client